Privacy policy
Draft. This page is a working draft awaiting review by legal counsel. The final text will be posted before launch.
This policy explains what information Cefar Medical Clinic("we") collects through this website and what we do with it. It does not cover information collected during your medical care at the clinic — that is governed separately under BC's health-care privacy legislation and by your treating physician's practices.
What we collect
The only personal information this website collects is what you submit through the contact form on the Contact page: your name, email address, an optional phone number, and a short message.
We do not collect medical information through this website. The contact form is for appointment-style inquiries only. For anything involving your medical care, please call the clinic at 778-504-4407 or visit in person.
How we use it
Contact-form submissions are emailed to the clinic so reception can respond. We do not use them for marketing, do not share them with third parties for marketing, and do not store them in a database — they exist only in our email inbox and our email provider's delivery logs.
Third-party services
- Resend — delivers contact-form emails. Resend retains delivery logs for up to 90 days.
- Cloudflare Turnstile — anti-bot challenge on the contact form. Cloudflare may collect basic technical information (IP, user-agent) for abuse detection.
- Vercel — hosts this site. Vercel records access logs for operational purposes.
- Google Analytics (if enabled) — anonymized usage statistics. We do not combine analytics data with contact-form data.
Cookies
We do not use cookies for advertising or cross-site tracking. Essential cookies may be set by Cloudflare Turnstile while you complete the contact form.
Your rights
Under PIPEDA and BC's PIPA, you can request access to or correction of information we hold about you. To make a request, email cefar.secure@hushmail.com or call 778-504-4407.
Contact
Questions about this policy can be directed to cefar.secure@hushmail.com or to the clinic directly.
TODO(legal): replace with final-reviewed copy before launch. Verify Resend log retention, confirm whether GA is enabled at launch, and add the privacy officer's name if appointed.